TUNAI Privacy Policy

Showing the version for: United Kingdom · European Union · Australia · United States · India · Philippines · Nigeria · Nepal · Sri Lanka

What TUNAI collects, where it goes, and how to get it back or delete it.

Last updated: 17 October 2026

Who is responsible

TUNAI is run by Praveen Kumar Pandurangan. We are the data controller for your personal data under the Nigeria Data Protection Act 2023.

Contact for anything on this page, including access and deletion requests: [email protected].

What TUNAI collects

Your account

When you sign in with Google, TUNAI receives and stores your email address, your name, and Google's stable account identifier for you. It never receives or stores your Google password.

Notifications on your phone: an experiment, off until you switch it on

Reading the notifications on your phone is a separate, opt-in feature under Settings › Experimental, and it lives nowhere else. It is off by default on every account, nothing in the app asks you to turn it on, it is never sold or offered as part of a paid plan, and no screen proposes it to you after a win or a quiet day. If you never go looking for it, nothing about your notifications is ever read.

If you do turn it on, you see a plain-language explanation first, in the app, before the system permission screen opens: what is read (messages, emails, calendar alerts, deliveries), what is masked or dropped before it ever leaves your phone, and what TUNAI can never do with a notification, which is act on it. You have to actively agree; dismissing that screen changes nothing. Three things have to agree before a single notification is read: the switch on your phone, the listener component (which the operating system will not run until the switch is on), and our server's own record that you opted in, which it checks before accepting anything a phone sends. You can turn it off again at any time, and mute any individual app while it is on.

Services you connect

Only the ones you explicitly connect, and only what that connection covers: for example calendar events, or email. Nothing is connected by default.

What you tell it

Messages you write to TUNAI, goals you set, and errands you ask it to run.

What you hand it

Photos and documents you attach in a chat: a receipt, a letter, a photo of a meter reading. These are only ever the ones you pick or take deliberately. The app has no access to your camera roll and never asks for the camera permission; when you choose "Camera" it hands the job to your phone's own camera app and receives only the single photo you took. Like everything else, an attachment is read by an AI model so TUNAI can understand it.

Records of what it did

An audit log of actions taken, so TUNAI's behaviour can be inspected and held to account. Each entry says what kind of action it was, when, and who or what took it (you, TUNAI, or the system). Since 27 October 2026 a new entry no longer keeps what you wrote, your email address or the names of your files; older entries may hold such details until you delete your account. The log is append-only: when you delete your account its entries stay, because a record of a deletion that can itself be deleted is not a record, but any details on them are cleared, and nothing left in it says who you were.

How you use the app

So we can tell whether the app is any good, it records four things: that the app was opened, that you started a hunt (and which kind, for example jobs or property), that you were shown the price, and that you tapped to buy. That is the whole list. Each one is a count and a date, with no content: there is nowhere in it to put anything you wrote, anything TUNAI found, or anything you were looking at. We use it to see where people get stuck, and for nothing else. It is not sold, not shared, and not sent to any advertising or analytics company; it goes to TUNAI's own server and no further. It is on unless you turn it off, and you can turn it off at any time in Settings, under "How you use the app", without losing anything else.

If the app crashes, or you tell us something

When the app crashes it keeps the technical details of the crash (the type of error, the first lines of where it happened in the code, the app version, your Android version and phone model) and sends them to TUNAI's own server the next time it opens. Before they leave your phone, anything that looks like an email address, a long number or an access token is blanked out, and nothing from TUNAI, your messages or your notifications is included. This goes to us and to nobody else; there is no third-party crash-reporting service. If you use "Tell TUNAI" to send us feedback, we keep what you wrote, which screen you were on and the app version, so that a person can read it and act on it. Both are kept for at most a year.

Where an install came from

If you reach our app from a button on our website or a link a creator shared, Google Play can pass a short random code along with the install. The first time the app opens it sends that code to us once, and again, once, without the code, when you first sign in. We use these only to add one to a count of installs and sign-ins for that page or link and your country, so we can see which pages help people. The code is not linked to your account, your device or your address, it is deleted from our side as soon as it is used or after seven days if the app never opens with it, and it is deleted from your phone as soon as it has been sent.

What is filtered out before it is ever sent

This happens on your phone, before the app writes its own log and before anything touches the network:

• Masked: one-time codes and OTPs, card and account numbers, passwords.
• Dropped whole: notifications that look like banking or health. These are never sent, and TUNAI only records that something in that category was set aside, never what it said.

The server applies the same floor again when data arrives, so there are two independent filters and the one on your phone is the outer one. The rules are pattern-based and are not perfect: they are a floor, not a guarantee, and something sensitive worded unusually could still get through.

Where your data lives

On a dedicated server rented from Hetzner Online GmbH in Helsinki, Finland, inside the EU. Each user's data is separated at the database level, so one account cannot read another's.

Your data is stored outside Nigeria. Our servers are in the European Union (Germany and Finland), and some of the services TUNAI uses to do its work (the language model, the browser it drives, the email sender) process data in the European Union and the United States.

The Nigeria Data Protection Act 2023 permits a transfer abroad where the recipient is bound by adequate protection, or on another basis the Act allows, including your consent once you have been told the risks. Our processors are bound by contract to protect your data, and by creating an account you consent to this transfer.

If a breach happens that is likely to put you at high risk, we will notify you and the Nigeria Data Protection Commission, as the Act requires.

Keys and tokens for services you connect are individually sealed with AES-256-GCM encryption. To be precise about the limits of that: the rest of the database is not separately encrypted at rest and is protected by the security of the server itself.

Who else sees your data

TUNAI does not sell your data and does not share it for advertising. It is shared only with the following, and only as needed to do the thing you asked for:

The website, and cookies

Everything above is about the app and your account. This section is about tun-ai.com and jobs.tun-ai.com, the public pages that describe the product, including this policy, the terms, the account-deletion page and any shortlist somebody has shared with you. The website and the app are deliberately separate: unless you press Save or sign in on jobs.tun-ai.com, as described next, the website never sees your account, and your account is never joined to anything the website measures. Apart from that, the one thing it can collect is an email address you type into a job alert, described under Job alerts.

Saving jobs and signing in on jobs.tun-ai.com. If you press Save on a job, or sign in, we set one cookie on your browser, tunai_session, and a small flag cookie, tunai_h, that says only whether a session exists. They are strictly necessary: there is no way to keep a saved list or a sign-in without them, so they are not covered by the analytics banner, and we set them only when you press Save or sign in, never when you just read a page. tunai_session is HttpOnly, is sent only to jobs.tun-ai.com, and lasts 30 days, after which your session ends. Before you sign in, your saved jobs are stored under an anonymous placeholder account on our servers, not on your device, and hold only the job's number, your chosen stage (Saved, Applied, Interviewing, Offer or Closed) and the job's title, employer and place as the public page showed them. When you sign in with Google or an emailed link, that list becomes your account's; if you already had an account with the same address, the two lists are merged. If you are signed in and press Apply now, your browser remembers on your device (not on our servers) for up to 30 minutes that you did, so it can ask "Did you apply?" when you come back; you can turn that question off in Account. We count visits to these features without identifying you (how many saves, how many sign-ins); for a signed-in account we also keep which job you saved or marked applied, by number, with the date, to tell us whether the feature works. We do not use any of it for advertising and do not share it. You can delete your account, and with it your saved jobs, at any time on the delete-account page.

We also count, as a plain number per day, how many visits to our public pages came from each country, using the country that our network provider infers from the connection when a page is requested; we keep only the country (from a short fixed list, or "other"), never your address, city, device or anything about you, we set no cookie for it, and the count cannot be traced back to any person or used to identify anyone.

Which home page you see. If you open tun-ai.com from a country that has its own TUNAI page (the United Kingdom, the United States, Canada, Australia or India), we send you to that page, using the same country our network provider infers from the connection. Search engines and link previews are never sent anywhere. If you choose a page yourself, for example the global tun-ai.com page, we set one small cookie on your browser, tunai_home, that holds only that choice (global or the name of a country page) for one year, so you are not sent somewhere else next time. It is strictly necessary for the choice you asked for, carries no identifier, is never read by analytics, and is only set when you make the choice. Clearing your browser’s site data removes it.

Every page on those two sites can load Google Analytics to count how many people visit and which pages they read. A shared shortlist is different: it is a private link one person sent another, so its page is additionally marked so search engines will not index it, its address is never passed on to another site through a referrer, and Google Analytics is told only that a shortlist was viewed, never which one, so the token in the link itself never reaches Google.

If you do accept, Google Analytics sets cookies named _ga and _ga_<id> that give your browser a random identifier so a second visit is not counted as a second person. They last up to two years and you can delete them in your browser at any time. It records the pages you viewed, roughly where in the world you are, and what kind of device and browser you used. Google Analytics 4 does not log or store IP addresses, and this site asks it to keep advertising storage and ad personalisation denied even when you have accepted analytics, so what it collects is not used to advertise to you.

We ask for your consent first, which is why nothing happens before you give it. Google acts as our processor for this and may process the data outside the UK. Google's own explanation of what it does with it is at policies.google.com/technologies/partner-sites.

Strictly necessary things still work without consent: signing in to your account sets a session cookie because there is no way to keep you signed in without one, and that is not analytics and is not covered by the banner.

Searching on jobs.tun-ai.com

You can search jobs without an account. What you type (the job, the place and any filters you choose) is sent to us to run the search. We count that a search was run, and which buttons on the home page were pressed, by country and by where the visit came from (a search engine, a link or typing the address); those counts never hold what you typed and are not tied to you. Your browser also remembers three things on your device, and they are not sent to us: the country you picked, your last search (the words and the country, so the home page can offer it back; the Clear button there removes it), and that you closed the app suggestion on an Android phone (for 30 days). Clearing your browser’s site data removes all three. If you ask for new jobs by email, that is a job alert, described next.

Job alerts from jobs.tun-ai.com

If you ask for a job alert on jobs.tun-ai.com, we keep your email address, the alert you chose (for example Security Engineer jobs, remote, in the US; for an alert saved from a search, the words, the place and the filters you searched with), and when you asked and when you confirmed. Nothing else: no name, and not the address you asked from. We use them only to send that alert. We email you once to confirm; if you do not confirm within 7 days we delete the address. After that the alert comes at most once a week, only in a week with new jobs, and each one ends with a single line about the TUNAI app. Every alert email has an unsubscribe link, and unsubscribing deletes the address and the alert straight away. An alert is not a TUNAI account and is never joined to one.

Messages we send you, and notifications in your browser

When you have an account, TUNAI keeps a short record of what it sent you, so you can read it in your inbox at /me/inbox. Each entry is the kind of message, how it reached you (email, a push on your phone, a notification in your browser, or the site), when, the one short line you already saw, and whether it was delivered. It does not hold the message itself, your email address, or a notification address. We keep an entry for 90 days and then delete it. The list is in the export of your data, you can clear it at any time from the inbox, and deleting your account deletes it.

If you switch on notifications in your browser, after saying yes to our own question first, we keep your browser's push address and keys, encrypted, so that we can send you only what you chose. It is one entry for each browser, you can remove it from your notification settings, and we delete it the moment your browser tells us it is gone. We never ask your browser for permission when a page loads. You choose which kinds of message come by which route, and a quiet window in which pushes wait; every message that is not about your account has a one-tap unsubscribe. Account, security and billing emails cannot be switched off. The weekly market note is a separate email list: we email you once to confirm, keep your address, the market, the role and the place you chose, and delete them when you unsubscribe or if you do not confirm within 7 days. No notification text is ever sent to our analytics.

Employers claiming a page on jobs.tun-ai.com

If you claim an employer’s page, we keep the work email address you proved with (or the domain you proved by a DNS record or a page tag), the company you claimed for, the description and links you wrote, and when you accepted what you granted. We use them to check the claim, and a person at TUNAI reads every claim before anything on the page changes. The six digit code is kept only as a one-way hash and stops working after ten minutes. None of it is joined to a TUNAI account or passed to anyone else. When you withdraw the claim, or we reject or end it, we blank the address and the words and links you wrote, and keep only that a claim was made and decided (the company, the domain and the dates). A claim you leave unfinished is closed after 7 days and the address blanked.

Other people's information

Your notifications contain other people's words: messages they sent you, their names, sometimes their plans. They did not agree to this policy, and they cannot see or delete what TUNAI holds about them. You are choosing this on their behalf, so please be deliberate about it. Muting a chat app in Settings stops it being sensed at all, and deleting your account removes what it learned about them along with everything else.

How long it is kept

• Raw sensed events that were triaged as noise or as merely worth surfacing expire automatically after 14 days by default. TUNAI may tune this between 3 and 90 days.
• What it learned from them, such as a commitment you made or a lesson about how you work, persists until you delete it. TUNAI is designed to remember what things meant rather than everything that happened.
• Your account and its data persist until you delete your account, which removes them immediately.
• Your message log (the short record of what we sent you) is kept for 90 days.
• The audit log is retained, as described above.

Your rights

Under the Nigeria Data Protection Act 2023 you can ask us whether we hold personal data about you and for a copy of it, ask us to correct it, ask us to erase it, ask us to restrict how we use it, receive it in a portable form, object to processing, and withdraw your consent at any time. You also have the right not to be subject to a decision based solely on automated processing that has legal or similarly significant effects on you.

Two of those need no request: Settings › Export my data returns everything TUNAI holds, immediately, and the delete-account page erases it.

Two of these need no request and no waiting:

If you only have a job alert, the unsubscribe link in any of its emails deletes everything we hold about you; or write to [email protected].

Write to [email protected], and it is answered by a person.

If you are not satisfied with how we handled it, you can lodge a complaint with the Nigeria Data Protection Commission at ndpc.gov.ng.

What TUNAI does not do

• No advertising, and no advertising identifiers.
• No third-party analytics, tracking or crash-reporting SDK in the app. The Android app contains none, and nothing you do inside it is reported to an analytics service. The public website is covered above, and it is a different thing: it counts anonymous visits to a marketing page, with your permission, and it cannot see your account or, if you ask for a job alert, your email address and that alert.
• No selling or renting of your data to anyone, ever.
• No profile building for anyone's benefit but your own.

Legal basis for processing

We process your personal data on the consent you give when you create an account, and because we need it to perform the contract you entered into with us. You can withdraw consent at any time, as easily as you gave it, by deleting your account in the app.

Reading your notifications is a separate consent: it is off until you turn it on, and can be turned off again at any time.

Job alerts are sent on your consent, which you give by confirming the link we email you and withdraw by unsubscribing.

Children

TUNAI is not intended for anyone under 16 and is not knowingly offered to them.

Security

Data travels over HTTPS. The app cannot send over plain HTTP. Connected service keys are individually encrypted. If a breach occurs that risks your rights and freedoms, you will be told, and so will the relevant regulator, within the deadlines the law sets.

Changes to this policy

If this policy changes in a way that materially affects you, you will be told in the app before the change takes effect. The date at the top always reflects the current version.